This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa File: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (raw, json) Hash identifier: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ= Subject key identifier: 0C:E7:5B:40:86:93:37:6F:94:EA:50:4C:88:50:AC:53:68:DB:5A:B9 Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930 Certificate serial: 019B7BA4E2EB22575EDB24B0E3C92F019AE9 Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47901 IP address blocks: 94.125.224.0/24 maxlen: 24 94.125.225.0/24 maxlen: 24 94.125.226.0/24 maxlen: 24 94.125.227.0/24 maxlen: 24 94.125.228.0/24 maxlen: 24 94.125.229.0/24 maxlen: 24 94.125.230.0/24 maxlen: 24 94.125.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e2:eb:22:57:5e:db:24:b0:e3:c9:2f:01:9a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce75b408693376f94ea504c8850ac5368db5ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:b4:a1:41:61:29:18:74:59:a9:b5:d0:7a: c9:cc:4e:cb:70:99:17:b3:43:73:ce:5d:4c:55:a5: 56:98:93:6e:84:cd:36:dc:d7:60:63:5d:84:c7:e1: c0:22:f3:d9:a5:91:f6:aa:de:1a:44:eb:da:34:d7: 75:23:78:49:5d:fa:3a:96:6f:03:5a:7c:43:4c:d0: c9:33:e3:b7:dd:52:0c:31:a0:21:5b:7c:34:1a:b2: c6:92:3f:68:d0:9b:d9:42:b9:d4:0e:85:2d:8e:9d: f1:9f:b5:ff:e9:c4:a6:3b:e6:4c:2d:57:ef:87:7e: 08:51:dd:33:99:f6:ec:1f:49:ec:10:7a:75:53:1b: 90:8e:d4:2f:c2:91:96:42:f8:16:a5:12:e2:ed:0c: e1:a4:b3:d3:6e:01:b7:e9:a3:cb:4f:9d:c9:84:fd: be:72:eb:2e:99:fd:c6:dc:0f:5a:12:62:c5:3f:32: e0:78:98:e0:56:ae:77:6a:74:0c:f8:c7:18:17:af: 2b:30:59:50:d4:06:e1:e6:99:05:90:ca:fc:fa:48: 23:69:be:02:ac:8a:b6:58:6a:0d:85:71:57:99:d7: ab:a1:54:f7:1b:84:45:47:fa:e2:72:0c:e0:ad:16: 58:10:68:6f:da:cb:16:2d:4f:d8:5c:b1:f3:75:af: c1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:5B:40:86:93:37:6F:94:EA:50:4C:88:50:AC:53:68:DB:5A:B9 X509v3 Authority Key Identifier: keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.224.0/21 Signature Algorithm: sha256WithRSAEncryption 28:c6:bc:10:ec:0f:62:9d:e5:dd:b9:45:9c:57:08:7a:26:58: ea:44:5b:bc:78:2a:ee:97:c1:3b:90:f1:36:f8:07:3a:bf:c0: 07:6a:89:35:4d:d4:d4:17:46:c7:87:f0:60:2e:8f:84:43:32: 23:81:73:ed:dc:e4:6c:1a:0c:e8:a6:35:40:1c:56:f5:94:fc: 75:df:c5:a8:fe:25:66:04:f1:92:d2:a9:9d:e9:55:86:d7:5c: 82:0e:ee:ac:a8:d9:c7:d5:3a:da:b4:79:43:1a:ad:9b:01:ae: f1:eb:39:d5:e8:74:c4:e4:34:c6:96:86:30:1a:92:91:84:76: a6:86:af:4d:8b:c2:3a:9a:57:21:6b:a0:ad:21:88:ad:78:f8: d1:35:70:40:fb:1e:ed:f5:6c:78:3b:18:7e:3e:59:8c:6c:68: 44:95:df:8d:fe:ee:cd:f1:21:d4:a2:49:05:00:03:c8:f4:68: 2e:f3:47:1a:4e:c7:59:fd:cf:3d:57:a2:20:c9:f2:05:e8:c3: a6:ee:b9:11:eb:cb:b9:2b:ea:de:cf:01:b2:db:06:0a:f5:27: 99:5e:80:aa:df:5d:1e:18:4f:e9:b7:b4:d4:18:03:aa:5b:57: 3f:0c:78:3b:43:5d:85:17:f0:27:14:d5:db:d4:ce:e8:ff:28: f7:a0:ce:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOLrIlde2ySw48kvAZrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk YjU5MzAwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2U3NWI0MDg2OTMzNzZmOTRlYTUwNGM4ODUwYWM1MzY4ZGI1YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG60oUFhKRh0Wam10HrJzE7LcJkX s0Nzzl1MVaVWmJNuhM023NdgY12Ex+HAIvPZpZH2qt4aROvaNNd1I3hJXfo6lm8D WnxDTNDJM+O33VIMMaAhW3w0GrLGkj9o0JvZQrnUDoUtjp3xn7X/6cSmO+ZMLVfv h34IUd0zmfbsH0nsEHp1UxuQjtQvwpGWQvgWpRLi7QzhpLPTbgG36aPLT53JhP2+ cusumf3G3A9aEmLFPzLgeJjgVq53anQM+McYF68rMFlQ1Abh5pkFkMr8+kgjab4C rIq2WGoNhXFXmderoVT3G4RFR/ricgzgrRZYEGhv2ssWLU/YXLHzda/BywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAznW0CGkzdvlOpQTIhQrFNo21q5MB8GA1UdIwQY MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt YTFmNTczZDA2OWRhLzEvRE9kYlFJYVROMi1VNmxCTWlGQ3NVMmpiV3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXn3gMA0G CSqGSIb3DQEBCwUAA4IBAQAoxrwQ7A9ineXduUWcVwh6JljqRFu8eCrul8E7kPE2 +Ac6v8AHaok1TdTUF0bHh/BgLo+EQzIjgXPt3ORsGgzopjVAHFb1lPx138Wo/iVm BPGS0qmd6VWG11yCDu6sqNnH1TratHlDGq2bAa7x6znV6HTE5DTGloYwGpKRhHam hq9Ni8I6mlcha6CtIYitePjRNXBA+x7t9Wx4Oxh+PlmMbGhEld+N/u7N8SHUokkF AAPI9Ggu80caTsdZ/c89V6IgyfIF6MOm7rkR68u5K+rezwGy2wYK9SeZXoCq310e GE/pt7TUGAOqW1c/DHg7Q12FF/AnFNXb1M7o/yj3oM5n -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:25 2026 by rpki-client